
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
File: jKszW_vzkiyQjyAPyLk4vIHMkwI.mft (raw, json)
Hash identifier: +CfNa9N2nuarmTrmRkp7Whdgo23ElQ5z3aRZPOc1M1E=
Subject key identifier: ED:1D:5D:C7:B3:96:81:F1:84:58:AF:92:FA:13:39:E8:F3:E8:75:BC
Authority key identifier: 8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
Certificate issuer: /CN=A91F8AD4/serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
Manifest number: 09
Signing time: Sat 13 Jun 2026 09:13:59 +0000
Manifest this update: Sat 13 Jun 2026 09:13:59 +0000
Manifest next update: Sat 20 Jun 2026 09:13:59 +0000
Files and hashes: 1: jKszW_vzkiyQjyAPyLk4vIHMkwI.crl (hash: Z39X114JDFv2WGnl3Gaza3+Z3K1jxE8tnVno4OQgX5g=)
2: 0D504AD25B6411F1BCACB5ED9D833773.roa (hash: 3iyJLgKvX9P6A2EKlBdLN7L+RbKwbi8Xb0hFQxLvoas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl
rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AD4, serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Validity
Not Before: Jun 13 09:13:59 2026 GMT
Not After : Jun 20 09:13:59 2026 GMT
Subject: CN=6a2d1f57-ffa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:27:11:83:72:f5:57:26:26:ff:78:a1:56:
b2:c8:95:ec:64:8d:d9:1f:59:ea:cf:62:db:a6:89:
c2:56:a8:11:41:0c:74:80:70:bc:0d:b7:cf:f2:a5:
38:6f:8c:e7:f5:0e:fc:26:d5:d2:35:32:e0:22:d8:
e5:c0:91:6c:08:40:06:fd:4c:18:e0:1e:79:fb:d2:
75:b2:fd:9e:23:e4:cb:69:29:6b:c2:83:ed:b7:d8:
d0:ec:33:1d:dc:a4:20:3d:b2:a1:95:ee:5d:1d:6a:
d7:29:89:3a:a0:c5:89:ec:fd:48:a3:20:51:45:4e:
ef:aa:0d:67:4e:9d:c5:f9:3b:aa:b6:f9:df:69:56:
96:d2:ce:c1:fd:6c:0e:88:b0:f4:f3:ac:fd:2e:d2:
d8:08:7e:e3:3e:04:6a:ef:13:80:51:16:26:89:ac:
bc:86:dd:44:17:3f:eb:40:18:e6:27:7a:88:b7:17:
23:a5:02:89:26:83:d6:1c:72:64:d4:37:c5:af:31:
26:38:a2:10:57:a5:67:58:32:b5:c4:2c:2e:29:94:
12:a4:e3:87:97:e5:af:19:4c:aa:a1:b3:f6:d0:e6:
19:56:27:d5:14:e2:78:7b:43:27:52:be:69:a7:d2:
23:36:17:c7:94:e0:08:38:2d:ad:be:3f:57:8f:da:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:5D:C7:B3:96:81:F1:84:58:AF:92:FA:13:39:E8:F3:E8:75:BC
X509v3 Authority Key Identifier:
keyid:8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:dd:4a:b0:7c:4d:49:37:0e:4d:38:67:d4:4f:06:98:6b:
72:50:22:75:7d:f4:34:05:bf:95:b4:87:6f:32:57:58:88:2f:
60:68:f0:6c:6d:2e:d2:fd:65:ae:87:29:65:93:23:1c:8b:d2:
31:68:dd:20:19:12:78:5f:83:45:e0:ac:f6:74:3f:60:0a:47:
94:af:25:ee:5e:2b:3f:9c:67:c7:e3:32:b0:6e:bb:05:bf:6f:
fc:f7:38:8a:8d:9c:de:a1:cc:a5:3b:68:b5:a3:d8:b2:c8:9e:
f4:39:51:a0:9c:c7:67:4a:36:00:0a:b4:d4:1b:91:43:e8:76:
ff:f6:0b:c3:2e:d5:f6:3e:02:e9:34:ce:b8:dc:27:c3:c2:d7:
8d:e0:f1:6f:8e:a8:a9:33:4a:87:74:d8:93:8d:64:c2:6e:ab:
df:fa:f3:ca:d1:fd:86:4e:e9:c9:c4:53:b3:82:5c:41:c7:4f:
1f:d0:4b:e6:82:f3:17:3c:78:df:8b:d1:63:fc:79:b1:4e:67:
4e:d2:5e:49:9d:f9:bc:25:97:94:cf:77:ab:56:99:73:4e:44:
d3:97:a6:26:75:32:5b:9a:74:81:d4:77:cb:55:47:46:e0:34:
da:25:fc:b2:64:92:d4:cb:7f:f9:e3:3d:3f:8d:2c:85:fc:aa:
2c:fd:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:17:33 2026 by rpki-client